Softcom

11 CVEs across 1 Softcom products. Browse Softcom vulnerabilities, severities, and proof-of-concept exploits.

Softcom products with known CVEs

ProductCVEs
Iksoris11
Softcom CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-49709Medium4.42025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, allows for setting an arbitrary session cookie value. An attacker with an access to user's browser mig…
CVE-2024-49708Medium5.42025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks. An attacker might trick a user into fillin…
CVE-2024-49707Medium6.12025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into fil…
CVE-2024-49706Medium6.12025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Open Redirect attacks by including base64 encoded URLs in the target parameter sent i…
CVE-2024-49705Medium6.52025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise (DoS) attacks. An attacker might trick a user into usin…
CVE-2024-13598Medium6.12025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. Using a functionality of creating new…
CVE-2024-135972025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into fil…
CVE-2024-10090Medium6.12025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into fil…
CVE-2024-10089Medium5.42025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks. An attacker might trick a user into fillin…
CVE-2024-10088Medium6.12025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into fil…
CVE-2024-10087Medium5.42025-04-14Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might craft a link containi…